Da Hongfei (@dahongfei): The Drift exploit exposes a fundamental issue:

The Drift exploit exposes a fundamental issue: Insufficient security around administrative privileges. If early reports of compromised admin keys or signer authority are accurate, then the first point of failure lies in the fragility of the permission model itself. For protocols with significant TVL, any authority capable of modifying core markets, oracle inputs, or withdrawal thresholds should not rely on low-threshold multisig setups, let alone allow changes to take effect instantly upon signature. Equally concerning is the lack of timelocks and circuit breakers for high-risk operations. Even in the event of compromised admin access, protocols should not be drainable instantly. Critical actions such as listing high-risk assets, altering oracle sources, or adjusting market risk parameters must be subject to enforced timelocks, multi-phase execution, and stricter validation processes. At a minimum, these mechanisms should prevent an attacker from completing the entire exploit chain within seconds.